Dashboards & Visualizations

drilldown from a dashboard for each cell

surekhasplunk
Communicator

My dashboard shows below 3 fields
Department_name, Permanent_Count, Temp_Count
computers, 10,5
electricals, 20,7
mechanical, 15, 10

Now permanent_count and Temp_count are calculated fields which is sum of a field from my input lookup file depending on many criteria like region, band etc.

So if i do a condition match with click.value2 and search for that value say 10 that wont exist in my look up file, since thats a calculated field not a direct one.

Now my requirement is if i click on number 10 in the row computers i should see all the name of employees under computers department .

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

View solution in original post

0 Karma

niketn
Legend

@surekhasplunk, this seems to be a rephrased duplicate of the following question: https://answers.splunk.com/answers/590928/drilldown-cell-value.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

0 Karma

surekhasplunk
Communicator

Thanks it worked with $row.Department_name$ and also i have added search queries for each field passing this token along with other tokens. And disabling drilldown for few cells.

Thanks

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...